Vulnerabilities

TI-2019-05294 CVE-2019-7434 · GHSA-88jf-3wwg-7w8g

PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request…

LOW 32

PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01366 Published 2019-03-20 No fix listed CWE-200

TI-2019-05293 CVE-2019-7433 · GHSA-gwqm-q367-vjgc

LOW 39

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00636 Published 2019-03-20 No fix listed CWE-352

TI-2019-05292 CVE-2019-7432 · GHSA-5fpp-6342-xcp2

LOW 25

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00653 Published 2019-03-20 No fix listed CWE-79